Discuss EC-Council 312-50 Exam Topic 5 Question 21

Fred is the network administrator for his company. Fred is testing an internal switch.

From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session with his computer. How can Fred accomplish this?

AFred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.

BHe can send an IP packet with the SYN bit and the source address of his computer.

CFred can send an IP packet with the ACK bit set to zero and the source address of the switch.

DFred can send an IP packet to the switch with the ACK bit and the source address of his machine.

Suggested Answer: D

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Alona 12 months ago

Yeah, SYN packets are the standard for session initiation.

Thersa 12 months ago

Definitely not A, that's not how it works.

Rosio 12 months ago

Wait, can you really trick a switch like that? Sounds risky!

Annamae 1 year ago

I think D could work too, but not sure if it's the best choice.

Aleisha 1 year ago

Option B is the right way to go! SYN bit is key.

Tora 1 year ago

I’m leaning towards D. Sending an ACK with the source address of his machine sounds familiar, but I’m not confident about the specifics of the session establishment process.

Vilma 1 year ago

I remember practicing something similar where we had to manipulate TCP flags. I feel like using the ACK bit could be relevant, but I can't recall the exact context.

Jamal 1 year ago

I think the answer might be B, sending a SYN packet. It seems like the right way to initiate a session, but I'm not completely sure.

Shawna 1 year ago

I thought RST/SYN was more about resetting connections, so I’m not sure about A. I feel like SYN is definitely involved in starting a session, though.

Cecil 1 year ago

This seems like a straightforward question about information security policies. I'm pretty confident I can answer this correctly.

Lorriane 1 year ago

I'm confident that replacing the existing switches with mGig switches is one of the correct answers. The Cisco 3800 Series supports multi-gigabit Ethernet, so that would provide the necessary uplink speed.

Corazon 1 year ago

The partitioning criteria is clearly cell_id, as it's specified in the PARTITION BY clause. This is a good example of how partitioning can be used to optimize data storage and retrieval.

Moon 1 year ago

I keep thinking that "Capacity Control" aligns with the monitoring part, but I wasn't clear if that includes comparing output directly.

Frank 1 year ago

Hmm, this is a tricky one. I think the key here is to focus on the specific problem statement - resolving the name resolution issue. Modifying the SOA record doesn't seem directly related to that, so I'll need to carefully consider the other options.

EC-Council 312-50 Exam - Topic 5 Question 21 Discussion